$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft File: RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft (raw, json) Hash identifier: OPRV+gIrVSEIxOEJnb32RMv+OqG/QKHlqUUQ/iShS3M= Subject key identifier: 4D:25:9D:68:63:BB:69:9A:B1:DB:7A:1A:3A:6E:83:20:F7:83:6C:8B Authority key identifier: 44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D Certificate issuer: /CN=A91FF1CC/serialNumber=446FAF923BEBAF96357287FE250991C75491454D Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft Manifest number: 6D Signing time: Fri 05 Sep 2025 07:29:52 +0000 Manifest this update: Fri 05 Sep 2025 07:29:52 +0000 Manifest next update: Fri 12 Sep 2025 07:29:52 +0000 Files and hashes: 1: RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl (hash: wyCOPBdahUMHc4jVUix9stSINjsUeD/Nj0F65yNTBmY=) 2: 1ED36EFC590C11F0913BCB35C4F9AE02.roa (hash: WTYmLvNpyq/A5Kbra5mtKRBFCjY1e4fS3rGmshvrNGY=) 3: B7E221E4024311F0BD990F64C4F9AE02.roa (hash: d1zImNClufU6mQa0qsoJOx/6gPAzww6pSPXhwifVLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=446FAF923BEBAF96357287FE250991C75491454D Validity Not Before: Sep 5 07:29:52 2025 GMT Not After : Sep 12 07:29:52 2025 GMT Subject: CN=68ba9170-7bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:28:8d:ad:6e:55:1c:1b:f5:52:a3:28:32:f9: 09:56:17:fc:15:71:81:5c:55:6e:2d:89:fa:6b:c0: 88:37:49:f9:b3:33:f3:10:ae:5c:00:a8:d0:83:2e: fc:f7:4a:c7:d6:f0:f3:da:f9:9f:dc:1a:5b:e0:5a: 16:f2:d7:50:b6:65:5b:21:02:1f:f6:95:f7:ac:22: da:48:f9:7a:66:98:90:d0:85:43:a5:a5:15:3a:7f: ce:45:7d:50:d3:c1:b8:a4:4b:c2:3a:c4:21:32:e3: 12:06:f2:fa:6e:73:5e:85:46:33:51:88:aa:4f:1b: d2:f2:8a:80:b7:9e:8a:ac:fb:8e:6b:bb:90:a5:fd: 21:b6:e4:7b:40:df:58:1a:34:04:5e:e4:24:ce:ff: 13:55:b4:63:5d:ec:73:aa:25:d1:13:e2:da:7d:66: 46:06:f4:66:5d:4c:b0:d2:8e:59:61:e4:12:53:b5: f8:27:1f:59:8b:6c:97:e7:0c:8a:ac:2e:43:77:e0: 6c:07:19:60:13:a1:f5:1d:ee:d3:5a:da:11:fe:95: f3:13:d6:b2:dc:eb:cf:0d:b9:fa:fc:c5:6a:c8:79: b5:a3:f1:1a:fa:60:8a:99:42:4a:3f:0a:d2:ae:5e: 71:87:fc:38:86:4d:61:65:35:ff:e1:f6:0a:a9:11: 3d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:25:9D:68:63:BB:69:9A:B1:DB:7A:1A:3A:6E:83:20:F7:83:6C:8B X509v3 Authority Key Identifier: keyid:44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:45:68:33:d3:72:f1:21:a5:3d:d1:2b:ff:96:c7:5a:38:5f: d0:37:c1:4b:b9:66:d2:95:b8:cd:49:f9:b5:d7:9b:16:a1:0e: 7f:8e:76:12:65:78:20:99:05:a5:79:eb:c3:bd:2a:db:ed:8a: c5:48:94:55:f7:0e:fb:46:45:23:7b:5a:11:02:f1:0f:85:f7: 7e:44:0e:70:4f:ae:e8:85:46:fa:22:f6:17:bb:f4:d5:8c:da: 3a:d8:49:9e:3d:90:15:1d:57:1a:97:a1:61:eb:9b:9a:2d:4e: c4:c0:b5:23:8b:e2:de:d0:a0:e8:62:73:77:09:3d:44:8a:62: dc:b3:40:b2:41:7e:31:ac:0f:78:ec:fd:93:bd:b2:1e:c0:ae: 1a:c4:cf:75:74:41:a4:64:be:71:be:94:9b:51:d8:50:a1:ab: 36:40:57:fb:7f:11:91:d7:61:56:31:8c:c8:08:9f:ee:2a:c8: 1d:14:7a:84:6a:24:c7:cf:aa:5a:71:9d:5e:7d:41:9b:77:05: c4:e6:94:cb:b3:f1:ea:d5:a6:45:75:7e:bb:8e:0f:c6:eb:35: 3c:99:19:4b:df:9d:31:4c:55:4e:e3:bb:c3:71:18:46:cf:28: 91:ae:b6:af:dd:e0:74:78:1e:32:33:06:c0:01:7e:c2:a1:28: 74:cf:60:64 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjFDQzExMC8GA1UEBRMoNDQ2RkFGOTIzQkVCQUY5NjM1NzI4N0ZFMjUwOTkxQzc1 NDkxNDU0RDAeFw0yNTA5MDUwNzI5NTJaFw0yNTA5MTIwNzI5NTJaMBgxFjAUBgNV BAMTDTY4YmE5MTcwLTdiYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2KI2tblUcG/VSoygy+QlWF/wVcYFcVW4tifprwIg3SfmzM/MQrlwAqNCDLvz3 SsfW8PPa+Z/cGlvgWhby11C2ZVshAh/2lfesItpI+XpmmJDQhUOlpRU6f85FfVDT wbikS8I6xCEy4xIG8vpuc16FRjNRiKpPG9LyioC3noqs+45ru5Cl/SG25HtA31ga NARe5CTO/xNVtGNd7HOqJdET4tp9ZkYG9GZdTLDSjllh5BJTtfgnH1mLbJfnDIqs LkN34GwHGWATofUd7tNa2hH+lfMT1rLc688Nufr8xWrIebWj8Rr6YIqZQko/CtKu XnGH/DiGTWFlNf/h9gqpET2xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTSWdaGO7 aZqx23oaOm6DIPeDbIswHwYDVR0jBBgwFoAURG+vkjvrr5Y1cof+JQmRx1SRRU0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMUNDLzNBRkMzM0UyRUY2 MzExRUZCRjY0QUI2QUM0RjlBRTAyL1JHLXZranZycjVZMWNvZi1KUW1SeDFTUlJV MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUkctdmtqdnJyNVkxY29mLUpRbVJ4MVNSUlUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG MUNDLzNBRkMzM0UyRUY2MzExRUZCRjY0QUI2QUM0RjlBRTAyL1JHLXZranZycjVZ MWNvZi1KUW1SeDFTUlJVMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAFFaDPTcvEhpT3RK/+Wx1o4X9A3wUu5ZtKVuM1J+bXXmxahDn+OdhJl eCCZBaV568O9KtvtisVIlFX3DvtGRSN7WhEC8Q+F935EDnBPruiFRvoi9he79NWM 2jrYSZ49kBUdVxqXoWHrm5otTsTAtSOL4t7QoOhic3cJPUSKYtyzQLJBfjGsD3js /ZO9sh7ArhrEz3V0QaRkvnG+lJtR2FChqzZAV/t/EZHXYVYxjMgIn+4qyB0UeoRq JMfPqlpxnV59QZt3BcTmlMuz8erVpkV1fruOD8brNTyZGUvfnTFMVU7ju8NxGEbP KJGutq/d4HR4HjIzBsABfsKhKHTPYGQ= -----END CERTIFICATE-----Generated at Sat Sep 6 21:06:13 2025 by rpki-client